[PLUG] Spam

Mark Morgan lemming at attbi.com
Mon Feb 17 22:52:02 UTC 2003


Wil Cooley wrote:
> On Mon, 2003-02-17 at 21:22, Mark Morgan wrote:
> 
>>This was an interesting spam.  It had tons of these in the middle of the 
>>words of an html mail. <!--RHBuW-->
>>
>>Probably to defeat searches for particular words. Though I would think 
>>that the bogus html comments would flag it.
> 
> 
> Actually, the point is to defect check-sum anti-spam tools.  These spam
> mailers generate random characters so every or most messages are
> different, so when Razor and DCC makes check-sums of the messages,
> they're different.

Maybe simple checksums.  It wouldn't take much to strip these out and do 
a checksum of them.  The comment markers should send up a red flag.





More information about the PLUG mailing list